Antivirrus overidden

[Roper]

Hello,

My "Windows Security center" reports that my "Antivirrus" program is turned off and suggests that I turn it on.
I have no idea how to do this but any way, I followed a few threads from other forums and found that I could edit the following registry value:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center

The value for the AntiVirusOverride was set to 1 which means that it is disabled (i'm told). I changed it to zero and lo....when i reset the machine, it is turned back to 1 so something has infected my machine but i cant seem to find anything to get rid. I run Spybot and ewido but they report machine as clean which suggests that the actual virrus is removed but the registry still alters on boot.

Funny thing though, The firewall in the windows SEC center was also constantly disabled. When i tried to turn it on I kept getting this message:

Cannot start ICS

this drove me near insane until I found a command line from a forum somewhere:

NETSH RESET WINSOCK

Or something like that but this fixed the fire wall problem straight away and I wondered if there was a CMD line or something similar which would fix the AntiVirusOverride command?

cheers anyway

[md usa spybot fan]

My "Windows Security center" reports that my "Antivirrus" program is turned off and suggests that I turn it on.
I have no idea how to do this ...
What anti-virus do you have?

[Roper]

I have:

Ewido
Spy bot S&D
Microsoft Anti spyware beta

Did have AVG, sygate firewall, Zone alarm, panda, Mcafee, norton and others but removed them all.

By the way, The security center tells me that:

"0.-1.208987893 reports that it is turned off."

Under the virus protection warning. Do you know what it is referring to or how i could find out?

Thanks for replying.

[md usa spybot fan]

Windows Security Center was designed to help protect your computer by monitoring three vital security areas and alerting if there are problems in these areas:
Automatic Updates
Firewall
Virus Protection
Spybot has the following detections to alert you that the settings within Windows Security Center may not be optimal for Windows Security Center to alert you properly:
Windows Security Center.AntiVirusOverride
Windows Security Center.FirewallOverride
Windows Security Center.AntiVirusDisableNotify
Windows Security Center.FirewallDisableNotify
Windows Security Center.UpdateDisableNotify
You do not have an anti-virus. So by resetting Windows Security Center to alert you that there is a problem with your anti-virus is exactly what it is going to do and exactly what it was designed to do.

I suggest that you:
Get an anti-virus.
Replace the use of the Windows firewall with a better firewall.
Keep your system's software up-to-date.

[OldBoy]

I do have anti-virus software installed (Avira AntiVir Personal Edition, Windows XP recognizes this software), and get the entry: Windows Security Center.AntiVirusOverride.
I have my AntiVir Guard on all the time, and also let Windows alert me if it needs to be updated.
So what does it mean?

[md usa spybot fan]

OldBoy:

Go into Start > Control Panel > Security Center > look at the right hand side of the window and check the settings under "Virus Protection" (expand if necessary). I believe that you have overridden the protections and that you will find a button labeled "Recommendations". If you click on the "Recommendations" button I believe that you will get a window that indicates something like:I have an antivirus program that I'll monitor myself.
In other words, the following Spybot detection:


Windows Security Center.AntiVirusOverride: Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
Indicates that this prodedure was followed:
How to Disable Antivirus Alerts When Security Center Does Not Detect Installed Antivirus Application
http://www.microsoft.com/windowsxp/using/security/internet/sp2_disableavalerts.mspx

[Roper]

Windows Security Center was designed to help protect your computer by monitoring three vital security areas and alerting if there are problems in these areas:
Automatic Updates
Firewall
Virus Protection
Spybot has the following detections to alert you that the settings within Windows Security Center may not be optimal for Windows Security Center to alert you properly:
Windows Security Center.AntiVirusOverride
Windows Security Center.FirewallOverride
Windows Security Center.AntiVirusDisableNotify
Windows Security Center.FirewallDisableNotify
Windows Security Center.UpdateDisableNotify
You do not have an anti-virus. So by resetting Windows Security Center to alert you that there is a problem with your anti-virus is exactly what it is going to do and exactly what it was designed to do.

I suggest that you:
Get an anti-virus.
Replace the use of the Windows firewall with a better firewall.
Keep your system's software up-to-date.

Thanks dood,

can you suggest anti virus and fire walls which would be suitable?

[md usa spybot fan]

Roper:

It appears that you used several antivirus and firewalls in the past and would probably be in a better position to list the pros and cons of each than I am.

I personally use Mcafee VirusScan ($34.99 (USD)/per year) and FREE ZoneAlarm (Free).

If it is for a single home computer (non-commercial use) there are free anti-virus and firewalls listed here (a few of which you didn't list as having tried):
Freeware Replacements For Common Commercial Apps
http://www.bleepingcomputer.com/forums/topic3616.html

[bitman]

Roper: If you don't mind my asking, why did you remove all those other Antivirus/Firewall programs? Were they not performing their functions? Or was there another reason?

Do you enjoy maintaining your computer or would you rather it just "took care of itself"?

[Roper]

Hey Bitman,

Good question: Sometimes I enjoy resolving problems myself and feel that each time I get a little wiser about pc maintenance (which I would like to know fully one day) however, it is slow going and i get bogged down in problems which take me ages to solve so my answer is really a bit of both:

I like it when a can successfuly resolve something and get new knowledge but don't like the fact that this takes too long and can leave me very anoyed.

Are you adept in this sort if thing?

[md usa spybot fan]

Roper:

You didn't really answer this question:


Roper: If you don't mind my asking, why did you remove all those other Antivirus/Firewall programs? Were they not performing their functions? Or was there another reason?
I would be interested in an answer to that one, if you are willing. The answer could be beneficial to not only me but also to others who read this forum and are interested in experiences with antivirus and firewall programs.